Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer (raw, json)
Hash identifier: epb9LXyP/DGj7iL1GXK0KPobFXoVvnZT7daevjVKOMA=
Subject key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B1E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 22 Apr 2024 02:46:51 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 151291
IP: 49.128.4.0/22
IP: 103.31.236.0/22
IP: 103.244.116.0/22
IP: 223.29.252.0/22
IP: 2403:6380::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 10:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45536 (0xb1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 22 02:46:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:82:1d:19:33:ce:c8:2a:a9:38:6a:9b:ee:
e8:1b:87:35:fe:af:2b:87:59:0f:4a:ba:18:16:b3:
ec:eb:3d:62:2f:0e:43:9e:5f:84:3c:c6:51:14:7e:
cc:9a:2b:4a:87:b3:74:46:50:27:f7:4e:c1:8c:c0:
2f:9a:86:32:c5:bc:c8:82:bb:c0:c6:49:f5:62:b1:
86:a0:37:29:34:dd:32:44:c2:ff:f2:ce:c2:a2:19:
fc:90:8e:6c:e2:17:01:4e:2e:32:42:0e:b4:ad:ba:
a6:50:df:5e:b2:bb:54:0a:7a:ae:aa:aa:2e:ed:6c:
17:cc:f8:d0:d6:06:49:84:2c:8d:0a:1c:9f:14:63:
a0:fd:54:f3:b6:d4:d0:06:70:56:bb:17:9c:1a:06:
42:a0:60:77:31:9c:6e:d1:49:69:e7:f7:ba:c4:2a:
70:fd:a3:90:41:37:27:f5:a6:2c:f8:95:bd:bd:19:
1f:f8:1c:ba:73:a1:fb:37:0c:29:64:5a:c5:05:33:
43:5c:40:c6:be:f9:5d:62:50:82:f1:03:71:68:d3:
e9:db:c1:81:ac:6b:75:ac:b0:b8:e0:95:fb:88:56:
bf:b0:82:38:f9:85:d1:c7:13:bb:03:8b:62:f3:ec:
45:98:ce:fd:14:54:89:12:69:32:bd:f5:60:7b:5b:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151291
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
103.31.236.0/22
103.244.116.0/22
223.29.252.0/22
IPv6:
2403:6380::/32
Signature Algorithm: sha256WithRSAEncryption
9e:07:5d:6f:7c:91:5b:2e:44:04:42:85:c4:47:7c:c5:21:70:
62:7b:da:d2:df:9c:a9:e3:c2:37:be:d8:e5:3b:e5:23:2f:66:
d2:78:52:ff:7e:29:25:b9:81:15:0e:fb:22:47:fd:f3:8d:89:
1c:29:b9:61:02:66:06:0e:37:52:87:15:f8:40:f5:72:2a:51:
b9:b6:82:92:ee:92:2a:2b:c7:98:0f:30:15:4b:fe:73:a5:70:
b0:f0:27:2a:3f:ec:71:eb:97:c6:9a:a6:b6:8a:e9:3d:dd:8a:
b7:19:01:9d:ac:2c:fc:01:ab:75:2f:77:d1:2e:f2:0b:d0:d5:
73:12:80:c1:76:f3:b5:10:9b:ed:04:68:8d:f8:09:f8:f3:af:
75:4d:34:24:c6:48:94:e9:d6:a2:d3:21:ca:08:28:c9:03:fc:
62:fe:7f:e9:28:3f:a6:a6:ee:dc:df:5e:36:68:a1:91:6e:7f:
37:99:f7:69:9c:db:97:3d:da:3a:f3:18:b7:5e:ed:8e:b3:9c:
46:c8:2b:7a:7e:e9:21:4b:58:78:17:fa:0c:59:4f:09:0c:ee:
b3:5a:fd:e8:84:b9:94:57:e7:e2:11:38:67:e4:b7:11:be:95:
c6:a9:fa:3b:c8:71:cb:72:9c:3f:ba:4c:56:c1:34:d6:e1:34:
74:0f:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:28:36 2024 by rpki-client on console-fra.rpki-client.org